From 7901644cd02d8f074610347d5da70f9af3c281a5 Mon Sep 17 00:00:00 2001 From: Harshvardhan Pandit Date: Sat, 8 Feb 2025 22:32:45 +0000 Subject: [PATCH] minutes for 06 FEB 2025 --- .../data/meeting-2025-02-06.irc | 67 ++++++++ meetings/index.html | 1 + meetings/meeting-2025-02-06.html | 143 ++++++++++++++++++ 3 files changed, 211 insertions(+) create mode 100644 code/minutes-generator/data/meeting-2025-02-06.irc create mode 100644 meetings/meeting-2025-02-06.html diff --git a/code/minutes-generator/data/meeting-2025-02-06.irc b/code/minutes-generator/data/meeting-2025-02-06.irc new file mode 100644 index 000000000..84e8952e4 --- /dev/null +++ b/code/minutes-generator/data/meeting-2025-02-06.irc @@ -0,0 +1,67 @@ +16:15:34 RRSAgent has joined #dpvcg +16:15:44 Scribe: harshPandit +16:18:43 ScribeNick: harsh +16:15:47 repo: w3c/dpv +16:15:47 OK. +16:15:55 Meeting: DPVCG Meeting Call +16:15:57 Chair: harsh +16:16:51 Present: harshPandit, paulRyan, beatrizEsteves, mayraRusso, markLizar, nihadAtakishiyev, julioHernandez, julianFlake, mugdhaKhedkar +16:18:43 Regrets: delaramGolpayegani, georgKrog +16:17:14 Date: 06 FEB 2025 +16:17:28 Agenda: https://www.w3.org/events/meetings/178d1c71-a92d-4da7-a196-6a89d0fe2277/20250206T133000/ +16:17:37 \ Meeting minutes: https://w3id.org/dpv/meetings +16:17:47 \ purl for this meeting: https://w3id.org/dpv/meetings/meeting-2025-02-06 +16:17:47 Topic: v2.1 release +20:10:04 https://github.com/w3c/dpv/issues/198 -> Issue 198 DPV v2.1 release management (by ghurlbot) +16:17:47 \ v2.1 release candidate with open review until FEB-16; see https://lists.w3.org/Archives/Public/public-dpvcg/2025Feb/0002.html and https://github.com/w3c/dpv/issues/235 for hotfixes +16:17:47 Topic: AI Training +20:10:04 https://github.com/w3c/dpv/issues/82 -> Issue 82 Provide vocabulary to specify purposes and permissions related to AI training (by scottkellum) +16:17:47 \ continued discussion from last meeting on whether specifying concepts related to AI training should be within the scope of DPVCG +16:17:47 harsh: AI training concepts are currently missing - they are necessary to state e.g. ODRL policies to state whether AI training is permitted or prohibited +16:17:47 beatrizEsteves: we had the AIUP paper with Delaram which had concepts related to training for use with ODRL profile /AIUP: an ODRL Profile for Expressing AI Use Policies to Support the EU AI Act/ https://ceur-ws.org/Vol-3759/paper17.pdf +16:17:47 harsh: Yes, that paper has some concepts related to AI use, and it uses VAIR http://w3id.org/vair to state AI training. But that concept is a broad concept representing training, whereas we should state granular concepts for specific kinds of training e.g. there is fine-tuning which takes an existing trained model and applies more training on it. So the proposal here is to provide such a taxonomy for use with DPV. +16:17:47 beatrizEsteves: +1 to include concepts +16:17:47 iainHenderson: +1 to include concepts +16:17:47 paulRyan: +1 to include concepts +16:17:47 \ agreed to include it in scope; next step is to create proposed concepts and discuss them +16:17:47 Topic: Subjective Locations +20:10:04 https://github.com/w3c/dpv/issues/209 -> Issue 209 [Concept]: `AtX` subjective Location concepts (by coolharsh55) +16:17:47 \ continued discussion from last week on adding subjective locations e.g. home, work, park, school +16:17:47 iainHenderson: +1 +16:17:47 paulRyan: +1 +16:17:47 markLizar: what is the context? Where does this requirement come from? +16:17:47 harsh: e.g. for GDPR there is a DPIA condition regarding CCTV in public spaces - so how do we model a public space like a park is what these concepts are for +16:17:47 paulRyan: did we model GDPR exemption for personal processing? +16:17:47 harsh: no, we don't have that in DPV as of now +16:17:47 markLizar: we worked on public space CCTV notices where this would be of use +16:17:47 harsh: should we do public/private categorisation as Mark suggested last week? +16:17:47 markLizar: yes but it should be public, private, and personal - so three categories +16:17:47 harsh: okay, we are going for legally relevant categorisations such as publicly accessible areas, but there are nuances e.g. a hotel lobby is a private location that is publicly accessible and is considered as a public area in some contexts - so we should also consider these e.g. as publicly accessible private areas +16:17:47 markLizar: home/office is private, retail is semi-private - so there are useful categories to work with +16:17:47 harsh: agreed, though what should be granularity? How do we decide what concepts to model? +16:17:47 harsh: what about virtual locations? within device exists, so e.g. within app and so more can also be useful here +16:17:47 iainHenderson: +1 I’d be inclined to add virtual locations; e.g. on a specific website, in an app, on a server +16:17:47 \ agreed to include these concepts as proposed, and to discuss specific location concepts as a proposal +16:17:47 Topic: Inverted Locations +20:10:04 https://github.com/w3c/dpv/issues/208 -> Issue 208 [Concept]: Add Non-X (X = specific location) to represent locations that are not X (by coolharsh55) +16:17:47 \ Continued discussion on "inverted location" i.e. non-EU location for locations that are not EU +16:17:47 beatrizEsteves: +1, would be useful for ODRL +16:17:47 iainHenderson: +1, 'not' in option would be good to explicitly indicate not being in a location +16:17:47 \ Tentatively agreed to consider these locations, next step is to discuss with a concrete proposal +16:17:47 Topic: AOB +16:17:47 Subtopic: Data Categories from IAB/Google +16:17:47 harsh: proposal with Iain, Add IAB, Google data taxonomies under PD e.g. pd/iab, and pd/google as they are widely used? (DPVCG would still interpret them with sensitive information, special categories, etc. in addition to whatever is present in them) +16:17:47 iainHenderson: would be better to discuss later with more concrete ideas +16:17:47 Subtopic: EHDS extension +16:17:47 beatrizEsteves: want to EHDS extension for PACSOI project; how does it work with Health Sector extension? +16:17:47 harsh: not fixed yet, but my thoughts are that we have DPV Purpose as core concept, Health Sector extends them for health specific concepts, and then the EHDS extension extends the Health Sector concepts +16:17:47 beatrizEsteves: what is the status of the extension? It needs to be updated, and I am interested in doing that for the PACSOI project +16:17:47 harsh: yes, it needs to be updated. Georg was working on it. Best way to know would be to email Georg, CC me and we can see how to update it. +16:17:47 harsh: btw, does Belgium have a national health regulation aligned with EHDS, similar to how Ireland got the Health Information Bill last year which is aligned with the EHDS regulation - knowing these would allow us to decide how to model national laws for health data spaces in a way that links them to EU EHDS +16:17:47 beatrizEsteves: not sure about the national law here, there are people working on the health projects who might know +16:17:47 Subtopic: Call for User Participation +16:17:47 nihadAtakishiyev: joined recently, conducting a MSc research project at Uni. Paderborn with Mugdha where we are using DPV +16:17:47 mugdhaKhedkar: we are conducting research at uni. paderborn and want to propose concepts from work on android apps where we are exploring automation of DPV generation for android apps. We are conducting a study for this to understand what data is being collected and representing that based on DPV https://www.hni.uni-paderborn.de/sse/lehre/user-study-automating-android-privacy-assessments#c930114 +16:17:47 Topic: Next Meeting +16:17:47 \ The next meeting will be on FEB-13 Thursday 13:30WET/14:30CET and will be chaired by Beatriz +16:17:47 \ Agenda will be continuing discussion on topics started under v2.2 diff --git a/meetings/index.html b/meetings/index.html index a8dc90a54..fab215631 100644 --- a/meetings/index.html +++ b/meetings/index.html @@ -14,6 +14,7 @@

DPVCG Meeting Minutes

purl: https://w3id.org/dpv/meetings

See W3C DPVCG Calendar for upcoming meetings, agenda, and joining instructions.

    +
  1. DPVCG Meeting 06 February 2025 Thursday
  2. DPVCG Meeting 30 January 2025 Thursday
  3. DPVCG Meeting 23 January 2025 Thursday
  4. DPVCG Meeting 16 January 2025 Thursday
    5. diff --git a/meetings/meeting-2025-02-06.html b/meetings/meeting-2025-02-06.html new file mode 100644 index 000000000..893800796 --- /dev/null +++ b/meetings/meeting-2025-02-06.html @@ -0,0 +1,143 @@ + + + + +DPVCG Meeting Call – 06 FEB 2025 + + + + + + + + + + +
    +

    W3C

    + +

    DPVCG Meeting Call

    +

    06 FEB 2025

    + + +
    + +
    +
    +

    Attendees

    +
    +
    Present
    beatrizEsteves, harshPandit, julianFlake, julioHernandez, markLizar, mayraRusso, mugdhaKhedkar, nihadAtakishiyev, paulRyan
    +
    Regrets
    delaramGolpayegani, georgKrog
    +
    Chair
    harsh
    +
    Scribe
    harsh, harshPandit
    +
    +
    + + +
    + +
    +

    Meeting minutes

    +

    Repository: w3c/dpv

    +

    Meeting minutes: https://w3id.org/dpv/meetings

    +

    purl for this meeting: https://w3id.org/dpv/meetings/meeting-2025-02-06

    +
    + +
    +

    v2.1 release

    +

    <ghurlbot> Issue 198 DPV v2.1 release management (by ghurlbot)

    +

    v2.1 release candidate with open review until FEB-16; see https://lists.w3.org/Archives/Public/public-dpvcg/2025Feb/0002.html and w3c/dpv#235 for hotfixes

    +
    + +
    +

    AI Training

    +

    <ghurlbot> Issue 82 Provide vocabulary to specify purposes and permissions related to AI training (by scottkellum)

    +

    continued discussion from last meeting on whether specifying concepts related to AI training should be within the scope of DPVCG

    +

    harsh: AI training concepts are currently missing - they are necessary to state e.g. ODRL policies to state whether AI training is permitted or prohibited

    +

    beatrizEsteves: we had the AIUP paper with Delaram which had concepts related to training for use with ODRL profile AIUP: an ODRL Profile for Expressing AI Use Policies to Support the EU AI Act https://ceur-ws.org/Vol-3759/paper17.pdf

    +

    harsh: Yes, that paper has some concepts related to AI use, and it uses VAIR http://w3id.org/vair to state AI training. But that concept is a broad concept representing training, whereas we should state granular concepts for specific kinds of training e.g. there is fine-tuning which takes an existing trained model and applies more training on it. So the proposal here is to provide such a taxonomy for use with DPV.

    +

    beatrizEsteves: +1 to include concepts

    +

    iainHenderson: +1 to include concepts

    +

    paulRyan: +1 to include concepts

    +

    agreed to include it in scope; next step is to create proposed concepts and discuss them

    +
    + +
    +

    Subjective Locations

    +

    <ghurlbot> Issue 209 [Concept]: `AtX` subjective Location concepts (by coolharsh55)

    +

    continued discussion from last week on adding subjective locations e.g. home, work, park, school

    +

    iainHenderson: +1

    +

    paulRyan: +1

    +

    markLizar: what is the context? Where does this requirement come from?

    +

    harsh: e.g. for GDPR there is a DPIA condition regarding CCTV in public spaces - so how do we model a public space like a park is what these concepts are for

    +

    paulRyan: did we model GDPR exemption for personal processing?

    +

    harsh: no, we don't have that in DPV as of now

    +

    markLizar: we worked on public space CCTV notices where this would be of use

    +

    harsh: should we do public/private categorisation as Mark suggested last week?

    +

    markLizar: yes but it should be public, private, and personal - so three categories

    +

    harsh: okay, we are going for legally relevant categorisations such as publicly accessible areas, but there are nuances e.g. a hotel lobby is a private location that is publicly accessible and is considered as a public area in some contexts - so we should also consider these e.g. as publicly accessible private areas

    +

    markLizar: home/office is private, retail is semi-private - so there are useful categories to work with

    +

    harsh: agreed, though what should be granularity? How do we decide what concepts to model?

    +

    harsh: what about virtual locations? within device exists, so e.g. within app and so more can also be useful here

    +

    iainHenderson: +1 I’d be inclined to add virtual locations; e.g. on a specific website, in an app, on a server

    +

    agreed to include these concepts as proposed, and to discuss specific location concepts as a proposal

    +
    + +
    +

    Inverted Locations

    +

    <ghurlbot> Issue 208 [Concept]: Add Non-X (X = specific location) to represent locations that are not X (by coolharsh55)

    +

    Continued discussion on "inverted location" i.e. non-EU location for locations that are not EU

    +

    beatrizEsteves: +1, would be useful for ODRL

    +

    iainHenderson: +1, 'not' in option would be good to explicitly indicate not being in a location

    +

    Tentatively agreed to consider these locations, next step is to discuss with a concrete proposal

    +
    + +
    +

    AOB

    +

    Data Categories from IAB/Google

    +

    harsh: proposal with Iain, Add IAB, Google data taxonomies under PD e.g. pd/iab, and pd/google as they are widely used? (DPVCG would still interpret them with sensitive information, special categories, etc. in addition to whatever is present in them)

    +

    iainHenderson: would be better to discuss later with more concrete ideas

    +

    EHDS extension

    +

    beatrizEsteves: want to EHDS extension for PACSOI project; how does it work with Health Sector extension?

    +

    harsh: not fixed yet, but my thoughts are that we have DPV Purpose as core concept, Health Sector extends them for health specific concepts, and then the EHDS extension extends the Health Sector concepts

    +

    beatrizEsteves: what is the status of the extension? It needs to be updated, and I am interested in doing that for the PACSOI project

    +

    harsh: yes, it needs to be updated. Georg was working on it. Best way to know would be to email Georg, CC me and we can see how to update it.

    +

    harsh: btw, does Belgium have a national health regulation aligned with EHDS, similar to how Ireland got the Health Information Bill last year which is aligned with the EHDS regulation - knowing these would allow us to decide how to model national laws for health data spaces in a way that links them to EU EHDS

    +

    beatrizEsteves: not sure about the national law here, there are people working on the health projects who might know

    +

    Call for User Participation

    +

    nihadAtakishiyev: joined recently, conducting a MSc research project at Uni. Paderborn with Mugdha where we are using DPV

    +

    mugdhaKhedkar: we are conducting research at uni. paderborn and want to propose concepts from work on android apps where we are exploring automation of DPV generation for android apps. We are conducting a study for this to understand what data is being collected and representing that based on DPV https://www.hni.uni-paderborn.de/sse/lehre/user-study-automating-android-privacy-assessments#c930114

    +
    + +
    +

    Next Meeting

    +

    The next meeting will be on FEB-13 Thursday 13:30WET/14:30CET and will be chaired by Beatriz

    +

    Agenda will be continuing discussion on topics started under v2.2

    +
    +
    + + +
    Minutes manually created (not a transcript), formatted by scribe.perl version 217 (Fri Apr 7 17:23:01 2023 UTC).
    + + +